Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.mft
File: DyFSGnEnFX99rwrQkTlK1aHM53k.mft (raw, json)
Hash identifier: OLYMmG/gVPCBajO7X4ccKrth+0X/pI6sT5GxC/zmbmg=
Subject key identifier: 54:EB:00:C2:35:08:72:82:6E:2E:E8:16:4B:D5:0C:05:81:0E:66:E5
Authority key identifier: 0F:21:52:1A:71:27:15:7F:7D:AF:0A:D0:91:39:4A:D5:A1:CC:E7:79
Certificate issuer: /CN=0f21521a7127157f7daf0ad091394ad5a1cce779
Certificate serial: 01A00213B4B1BC5AA6E4A07006FA05D91C6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DyFSGnEnFX99rwrQkTlK1aHM53k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.mft
Manifest number: 1A0D
Signing time: Fri 14 Aug 2026 21:00:40 +0000
Manifest this update: Fri 14 Aug 2026 21:00:40 +0000
Manifest next update: Sat 15 Aug 2026 21:00:40 +0000
Files and hashes: 1: 0IWvtKpWz8nwzfyztFPG-10e-ec.roa (hash: M3DL2KpstDY4RX5irHxTIoQ7SYVzPk7eR23DZZrDMbo=)
2: DyFSGnEnFX99rwrQkTlK1aHM53k.crl (hash: AexkAg6lZIeH8z1c3XA2T80/lV2jFf7GCdMgkj298oc=)
3: pYVSN2AB9mwBr8yDS1zYwXrTuMQ.roa (hash: xWYPQfiNQqIYcOLgwTTjRZ9fSTqKYlkmjs7r1ngIGF4=)
4: uXN7_MtPKMwhSTIFKpLUwo-V5P8.roa (hash: 8z/tTyMqQq524Fl02SLcRSjti3sQ0AEo40zN2vpCYes=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.mft
rsync://rpki.ripe.net/repository/DEFAULT/DyFSGnEnFX99rwrQkTlK1aHM53k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:13:b4:b1:bc:5a:a6:e4:a0:70:06:fa:05:d9:1c:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f21521a7127157f7daf0ad091394ad5a1cce779
Validity
Not Before: Aug 14 21:00:40 2026 GMT
Not After : Aug 15 21:00:40 2026 GMT
Subject: CN=54eb00c2350872826e2ee8164bd50c05810e66e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e6:80:87:40:ec:15:f4:09:38:c0:14:94:f3:
8c:1f:e5:5a:c8:c0:70:72:30:90:59:2c:fa:53:9e:
b3:7f:2b:81:45:4f:34:63:e1:b2:de:33:27:90:20:
74:0b:d3:89:d1:be:66:06:39:2c:f5:72:69:b8:ff:
7a:a7:5b:88:24:87:99:ef:b7:3c:6a:c4:79:a5:bc:
65:2d:db:8b:09:f5:47:4b:c5:63:b6:4d:ef:6f:43:
43:f2:19:a7:c7:08:f9:46:36:ea:a9:94:03:06:c6:
1e:93:3d:7c:bc:79:b0:3b:ca:c2:9c:5a:bf:58:12:
e8:d8:e2:88:3c:52:c0:70:fe:fc:17:ec:7d:7a:5f:
7f:fe:05:b2:f9:2b:f3:04:c9:2a:42:63:49:7b:d1:
8d:39:ea:00:37:a8:43:d9:d7:09:bd:9b:3a:34:06:
8c:e6:2a:e9:b8:83:a5:50:ad:42:2f:b7:c5:e3:99:
72:51:22:dd:e2:44:86:e6:1d:7b:9c:16:5c:73:c7:
1d:ff:84:11:92:55:04:1f:cb:41:a1:43:f4:e8:ad:
83:96:c1:d8:7d:0c:a7:a2:60:66:1d:14:52:ca:a1:
db:45:71:d6:8e:02:60:ef:c1:f1:8b:b2:2d:22:93:
ab:32:d1:08:fb:58:b5:d5:6e:c8:a2:a2:4d:84:51:
e5:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:EB:00:C2:35:08:72:82:6E:2E:E8:16:4B:D5:0C:05:81:0E:66:E5
X509v3 Authority Key Identifier:
keyid:0F:21:52:1A:71:27:15:7F:7D:AF:0A:D0:91:39:4A:D5:A1:CC:E7:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DyFSGnEnFX99rwrQkTlK1aHM53k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:1b:31:9a:25:bd:42:4e:88:0b:a5:a4:10:41:16:98:67:b1:
5b:b1:d0:ad:c7:03:d8:a9:29:5f:46:96:29:7c:46:a7:7d:77:
cc:d9:ba:0c:29:18:1f:f0:48:bc:bd:7b:be:d2:40:b7:23:1e:
07:1b:cc:da:24:cf:14:b8:30:f6:a6:5f:8e:28:cc:79:7c:d0:
0f:f6:d7:96:33:97:29:aa:09:6f:4f:dd:1a:49:e2:ee:11:4a:
09:61:8f:77:8c:64:60:1d:59:e4:13:95:ae:2f:55:b0:56:e1:
1d:f1:99:f4:d7:0e:29:fe:24:73:4f:41:a0:5d:ac:fb:46:e1:
2f:a0:65:f6:5a:73:56:11:5b:7d:55:dc:22:67:ac:fd:e6:fa:
6f:e2:86:63:ae:8f:fe:e2:22:f8:d6:7b:1b:7d:1a:ce:65:ff:
93:7d:2a:62:e2:ae:d7:d7:03:39:8f:46:11:0c:cd:95:cf:d6:
98:0a:7b:20:55:6e:4d:38:94:5d:93:98:b5:2a:14:89:66:b0:
ac:34:ea:29:62:f1:bc:b2:2c:2b:66:2f:7b:08:0c:e3:29:65:
d5:78:11:88:4d:7a:34:78:af:a0:f9:11:d1:03:50:c6:0d:aa:
32:3f:78:b4:b8:88:77:39:66:36:31:d9:fb:a1:4a:08:c4:0e:
95:0d:c1:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:29:28 2026 by rpki-client